Video Screencast Help

Blocking pornographic internet sites

Created: 28 May 2008 • Updated: 21 May 2010 | 6 comments
I've installed and configurated on my server (Windows 2k3) Symantec Endpoint Protection 11.0 and, by Configuration Manager, I'd like to block pornographic Internet sites (for example or other similar sites.
I'm looking for this option but I don't find it.
It is possible or not?
If I can do it, how and where I have to configure this possibility?

Comments 6 CommentsJump to latest comment

Paul Murgatroyd's picture
we don't specifically have web-filtering technology in SEP, however you could use the firewall to block specific websites that you don't want them visiting. 
A far better solution to this is to make the user establish a VPN connection and browse the Internet through a company proxy with the correct protection levels.  Its not just a case of preventing the user from browsing, its more a case of protecting both yourself and your employees reputation.

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed:

GiuseppeM's picture
Dear Paul,
thank you for your answer.
Pc clients are connected in a LAN with an Active Directory, policies, shared folders, etc: so I think a VPN connection can't be a valid solution.
Very interesting is your idea about the use of firewall, so I ask to you how I can configure firewall to block pornographic internet sites like I've written in my first message.
Thanks a lot.
Paul Murgatroyd's picture

just create firewall rules to block access to sites you dont want. Like I said though, SEP is not a URL filtering tool and is no substitute for a proper solution that has its listings updated hourly (like websense/surfcontrol/etc.)

Paul Murgatroyd
Principal Product Manager, Symantec Endpoint Protection
Endpoint twitter feed:

ShadowsPapa's picture

I'm trying to block just a small handful of known sites we don't want folks going to - the list is small enough that I can add a half dozen rules as necessary, but can't seem to get it to block - the browser, IE7, still goes there as if nothing is going on......... (mostly to block eBay, etc. - it's not work related......)

RickJDS's picture

Simplest way per Windows PC:

Edit hosts file in System32\drivers\etc folder type in:

Message Edited by Rick Stark on 12-11-2008 01:03 PM
ShadowsPapa's picture

I'm aware of the hosts file, but unfortunately, that's not what I asked or needed - I asked about doing it in SEP.

We need it to be configurable on the fly, hosts file means copying it to all computers or manually editing on each. (our SMS person really isn't very good and we have many problems with SMS and AD here)

You can't pick and choose easily either, or base it on the PERSON.

With SEP we could - we could simply move computers around and/or apply different policies, or even do it PER USER, something you can't do with hosts file.

So still looking for a good answer.......... using SEP.